On supported ASUS routers, you can create a separate WiFi network (SSID) that routes connected devices through a VPN profile, while another network uses the regular ISP connection. This is useful for streaming TVs, guests, work devices, and family members who need different VPN behavior.
The available controls depend on your ASUS model and firmware. Newer routers may call the feature Guest Network Pro or simply Network; older routers may only have Guest Network, which does not offer the same VPN-by-SSID options.
What You Need Before Starting
- Connect to your ASUS router and open http://www.asusrouter.com or its LAN IP. For login details, see AsusWRT Router Access Guide.
- For a VPN WiFi network, first set up and verify at least one connected VPN profile under VPN > VPN Fusion. Choose a supported VPN provider from the AsusWRT VPN Setup Guides, then review How to Use ASUS VPN Fusion: Assign Devices and Multiple VPNs for routing options.
- Look for Guest Network Pro, Network, or VPN Network in your ASUS firmware. If you only see the traditional Guest Network screen, read the legacy note below before proceeding.
Create a Dedicated WiFi Network That Uses the VPN
Preferred route for supported ASUS models: create a VPN Network SSID so all devices joining that SSID use the chosen VPN without individual device assignments.
- Open Guest Network Pro > VPN Network, or the equivalent Network > Add Network > VPN Network menu in newer firmware.
- Choose a recognizable WiFi name such as Home-VPN and a strong WiFi password.
- Select the configured, connected VPN Fusion client/profile and enable VPN routing for that network.
- Review any options for local-network access, guest isolation, and bands, then click Apply.
- Connect a test device to the new Home-VPN WiFi SSID and check its public IP.
ASUS official walkthrough: Guest Network Pro / VPN Network Setup.
Alternative: Assign a VPN to an Existing Guest Network Pro SSID
- In Guest Network Pro / Network, open the existing Guest Network profile.
- Select the VPN tab, enable VPN routing, and choose your existing VPN Fusion client.
- Click Apply, reconnect a device to the guest SSID, and verify the VPN IP.
ASUS also documents this path: Assign a VPN to Guest Network Pro.
Create a Separate WiFi Network Without a VPN
Use a guest/secondary network routed through the regular ISP internet connection for devices that should not use the VPN.
- Under Guest Network Pro / Network, add a normal Guest Network or other suitable network profile (not the VPN Network preset).
- Set a clear name such as Home-ISP and secure it with a strong password.
- In that network profile’s VPN tab, leave the VPN assignment disabled or choose the Internet/ISP path if your firmware offers it.
- Check your VPN Fusion default connection and device policies. If a VPN is set to Apply to all devices, simply turning off the Guest Network’s VPN toggle may not guarantee an ISP bypass on every firmware. Configure an explicit ISP/bypass route where supported.
- Save, join the Home-ISP network with a test device, and confirm the public IP matches the ISP connection.
Confirm Each WiFi Network Uses the Intended Internet Route
- Connect a phone or laptop to the VPN WiFi SSID. Disable any VPN app or iCloud Private Relay on the device for this test.
- Visit WhatIsMyIPAddress.com and note the public IP and location. This should reflect your selected VPN endpoint.
- Disconnect and join the ISP WiFi SSID. Repeat the IP check; it should now show the ISP’s public internet route.
- If both SSIDs show the same IP, review the VPN Fusion default profile, guest-network VPN assignment, and any device-specific rules.
Common Issues and What to Check
I only see “Guest Network,” not “Guest Network Pro” or “VPN Network”
Your router may use older firmware or lack this feature. Traditional Guest Network creates a separate WiFi SSID, but the VPN routing option may not exist. Use VPN Fusion device assignments as an alternative rather than assuming the guest network automatically bypasses or uses the VPN.
Every network still uses the VPN
Check whether Apply to all devices is enabled in VPN Fusion. If it is, verify that the guest profile actually overrides the default route on your firmware. You may need an explicit per-network or per-device ISP rule.
A phone reports the wrong IP although the guest VPN profile is correct
Temporarily disable device-level VPN apps, iCloud Private Relay / Limit IP Address Tracking, browser proxy, or Private DNS settings, then reconnect. See Device Settings That Interfere With Router VPN.
Guest devices cannot reach local printers or other LAN devices
Check the guest network’s intranet access / network isolation settings. Changing isolation affects LAN access, not necessarily VPN selection. Keep guests isolated unless LAN access is actually needed.
Upgrade your ASUS router
Explore the Latest WiFi 7 ASUS FlashRouters
Looking for a newer ASUS router? Browse WiFi 7 models available from FlashRouters and compare features to find the right fit for your home or office. VPN Fusion and other features vary by router model and firmware.
Warranty and Returns FAQs
